Macos Security Vulnerabilities and Issues — Page 4 of Macos CVE List

Lucene search

AppleMacos

208 matches found

CVE•added 2019/12/18 6:15 p.m.•66 views

CVE-2019-8519

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. An application may be able to read restricted memory.

5.5CVSS5.6AI score0.00129EPSS

CVE•added 2019/04/03 6:29 p.m.•65 views

CVE-2018-4324

A permissions issue existed in the handling of the Apple ID. This issue was addressed with improved access controls. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS5.5AI score0.00146EPSS

CVE•added 2019/03/05 4:29 p.m.•65 views

CVE-2019-6211

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8CVSS8.2AI score0.00643EPSS

CVE•added 2019/12/18 6:15 p.m.•65 views

CVE-2019-6239

This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Mojave 10.14.4. A malicious application may bypass Gatekeeper checks.

7.8CVSS7.2AI score0.0005EPSS

CVE•added 2019/12/18 6:15 p.m.•65 views

CVE-2019-8606

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.5. A local user may be able to load unsigned kernel extensions.

7CVSS5.8AI score0.00098EPSS

CVE•added 2019/12/18 6:15 p.m.•65 views

CVE-2019-8801

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution.

7.8CVSS7.8AI score0.00161EPSS

CVE•added 2019/04/03 6:29 p.m.•64 views

CVE-2018-4410

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.1.

9.3CVSS6.9AI score0.00171EPSS

CVE•added 2019/04/03 6:29 p.m.•64 views

CVE-2018-4422

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

9.3CVSS7.2AI score0.00387EPSS

CVE•added 2019/12/18 6:15 p.m.•64 views

CVE-2019-8508

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.

7.8CVSS8.2AI score0.00118EPSS

CVE•added 2019/12/18 6:15 p.m.•64 views

CVE-2019-8510

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.

5.5CVSS5.3AI score0.00068EPSS

CVE•added 2019/12/18 6:15 p.m.•64 views

CVE-2019-8520

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to read restricted memory.

5.5CVSS5.7AI score0.0006EPSS

CVE•added 2019/04/03 6:29 p.m.•63 views

CVE-2018-4389

An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to macOS Mojave 10.14.1.

6.5CVSS6.3AI score0.00255EPSS

CVE•added 2019/12/18 6:15 p.m.•63 views

CVE-2019-8772

An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt. This issue is fixed in macOS Catalina 10.15. An attacker may be able to exfiltrate the contents of an encrypted PDF.

7.5CVSS7.5AI score0.00348EPSS

CVE•added 2019/04/03 6:29 p.m.•62 views

CVE-2018-4289

An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13.6.

7.1CVSS5.6AI score0.00216EPSS

CVE•added 2019/04/03 6:29 p.m.•62 views

CVE-2018-4403

This issue was addressed by removing additional entitlements. This issue affected versions prior to macOS Mojave 10.14.1.

5.5CVSS6.3AI score0.00226EPSS

CVE•added 2019/12/18 6:15 p.m.•62 views

CVE-2019-8522

A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4. An encrypted volume may be unmounted and remounted by a different user without prompting for the password.

5.5CVSS5.9AI score0.00107EPSS

CVE•added 2019/12/18 6:15 p.m.•62 views

CVE-2019-8555

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8AI score0.00465EPSS

CVE•added 2019/12/18 6:15 p.m.•62 views

CVE-2019-8590

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS7.3AI score0.00404EPSS

CVE•added 2019/12/18 6:15 p.m.•62 views

CVE-2019-8603

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted memory.

8.8CVSS6.4AI score0.00441EPSS

CVE•added 2019/04/03 6:29 p.m.•61 views

CVE-2018-4421

A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

9.3CVSS6.9AI score0.00251EPSS

CVE•added 2019/03/05 4:29 p.m.•61 views

CVE-2019-6200

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.

8.8CVSS7.1AI score0.00165EPSS

CVE•added 2019/12/18 6:15 p.m.•61 views

CVE-2019-8533

A lock handling issue was addressed with improved lock handling. This issue is fixed in macOS Mojave 10.14.4. A Mac may not lock when disconnecting from an external monitor.

7.8CVSS7.2AI score0.00118EPSS

CVE•added 2019/12/18 6:15 p.m.•61 views

CVE-2019-8561

A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate privileges.

7.8CVSS7.1AI score0.53EPSS

CVE•added 2019/12/18 6:15 p.m.•61 views

CVE-2019-8616

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.6AI score0.00119EPSS

CVE•added 2019/12/18 6:15 p.m.•61 views

CVE-2019-8701

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.9AI score0.00131EPSS

CVE•added 2019/12/18 6:15 p.m.•60 views

CVE-2019-8634

An authentication issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5. A user may be unexpectedly logged in to another user’s account.

8.8CVSS7.3AI score0.00414EPSS

CVE•added 2019/12/18 6:15 p.m.•60 views

CVE-2019-8691

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.

5.5CVSS4.9AI score0.0006EPSS

CVE•added 2019/04/03 6:29 p.m.•59 views

CVE-2018-4338

A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.

5.5CVSS6.3AI score0.01242EPSS

CVE•added 2019/12/18 6:15 p.m.•59 views

CVE-2019-8629

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.4AI score0.00297EPSS

CVE•added 2019/12/18 6:15 p.m.•59 views

CVE-2019-8730

The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed in macOS Catalina 10.15. A local user may be able to view a user’s locked notes.

3.3CVSS4.7AI score0.00115EPSS

CVE•added 2019/04/03 6:29 p.m.•58 views

CVE-2018-4178

A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue affected versions prior to macOS High Sierra 10.13.4.

5.5CVSS5AI score0.00039EPSS

CVE•added 2019/12/18 6:15 p.m.•58 views

CVE-2019-8604

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

8.8CVSS7.9AI score0.0021EPSS

CVE•added 2019/12/18 6:15 p.m.•58 views

CVE-2019-8694

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with kernel privileges.

9.3CVSS8.2AI score0.00297EPSS

CVE•added 2019/04/03 6:29 p.m.•57 views

CVE-2018-4285

A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

9.3CVSS6AI score0.00151EPSS

CVE•added 2019/04/03 6:29 p.m.•57 views

CVE-2018-4353

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.

9.8CVSS8.4AI score0.00504EPSS

CVE•added 2019/03/05 4:29 p.m.•57 views

CVE-2019-6220

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.

5.5CVSS5.3AI score0.00197EPSS

CVE•added 2019/12/18 6:15 p.m.•57 views

CVE-2019-8507

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.4. Processing malicious data may lead to unexpected application termination.

5.5CVSS6.6AI score0.00059EPSS

CVE•added 2019/12/18 6:15 p.m.•57 views

CVE-2019-8805

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges.

9.3CVSS7.8AI score0.04521EPSS

CVE•added 2019/04/03 6:29 p.m.•56 views

CVE-2018-4283

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6.

5.5CVSS4.8AI score0.0006EPSS

CVE•added 2019/04/03 6:29 p.m.•56 views

CVE-2018-4449

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.

9.3CVSS7.2AI score0.00434EPSS

CVE•added 2019/12/18 6:15 p.m.•56 views

CVE-2019-8589

This issue was addressed with improved checks. This issue is fixed in macOS Mojave 10.14.5. A malicious application may bypass Gatekeeper checks.

5.5CVSS5.7AI score0.00194EPSS

CVE•added 2019/04/03 6:29 p.m.•55 views

CVE-2018-4268

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.

10CVSS6.7AI score0.00442EPSS

CVE•added 2019/12/18 6:15 p.m.•55 views

CVE-2019-8693

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.

5.5CVSS5.9AI score0.00226EPSS

CVE•added 2019/12/18 6:15 p.m.•55 views

CVE-2019-8697

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.6AI score0.00122EPSS

CVE•added 2019/12/18 6:15 p.m.•55 views

CVE-2019-8755

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to determine kernel memory layout.

7.8CVSS6.5AI score0.00136EPSS

CVE•added 2019/04/03 6:29 p.m.•54 views

CVE-2018-4470

A privacy issue in the handling of Open Directory records was addressed with improved indexing. This issue affected versions prior to macOS High Sierra 10.13.6.

4.3CVSS4.4AI score0.0019EPSS

CVE•added 2019/12/18 6:15 p.m.•54 views

CVE-2019-8758

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with system privileges.

7.8CVSS7.6AI score0.00131EPSS

CVE•added 2019/12/18 6:15 p.m.•54 views

CVE-2019-8807

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges.

9.3CVSS8.1AI score0.00317EPSS

CVE•added 2019/12/18 6:15 p.m.•53 views

CVE-2019-8667

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.6. The encryption status of a Time Machine backup may be incorrect.

5.3CVSS5.8AI score0.0013EPSS

CVE•added 2019/12/18 6:15 p.m.•53 views

CVE-2019-8692

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory.

5.5CVSS4.6AI score0.0006EPSS

Total number of security vulnerabilities208